pre-motion-andrew-bird

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is a personal/unvetted GitHub repository being used as a plugin/install source (third‑party code you’d pull into local runtime), which is a common vector for unreviewed/executable malware and thus should be treated as suspicious unless you trust the author and have reviewed the code.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests user-provided “Matter facts” and “evidence references” to build an optimistic baseline and run adversarial passes (Stage 1–2) before synthesis, so outsider-authored free text submitted by the user is directly consumed.